Lucene search
K

8 matches found

CNVD
CNVD
added 2023/08/17 12:0 a.m.15 views

Google Chrome Data Forgery Problem Vulnerability (CNVD-2023-65156)

Google Chrome is a web browser from Google, an American company. A data forgery issue vulnerability exists in Google Chrome prior to version 116.0.5845.96, which stems from insufficient data validation of Systems Extensions, and can be exploited by a remote attacker to bypass file restrictions vi...

8.8CVSS8.3AI score0.00081EPSS
Exploits0References1
CNVD
CNVD
added 2023/07/10 12:0 a.m.16 views

Milesight UR32L ys_thirdparty check_system_user function command injection vulnerability

The Milesight UR32L is a 4G industrial router from China's Milesight. A command injection vulnerability exists in the Milesight UR32L ysthirdparty checksystemuser function, which can be exploited by an attacker to execute arbitrary commands on the system...

7.2CVSS7.3AI score0.00193EPSS
Exploits0References1
NVD
NVD
added 2023/07/06 3:15 p.m.17 views

CVE-2023-24595

An OS command injection vulnerability exists in the ysthirdparty systemuserscript functionality of Milesight UR32L v32.3.0.5. A specially crafted series of network requests can lead to command execution. An attacker can send a sequence of requests to trigger this vulnerability...

7.2CVSS7.1AI score0.00265EPSS
Exploits1References2
OSV
OSV
added 2023/07/06 3:15 p.m.0 views

CVE-2023-23550

An OS command injection vulnerability exists in the ysthirdparty userdelete functionality of Milesight UR32L v32.3.0.5. A specially crafted network packet can lead to command execution. An attacker can send a sequence of requests to trigger this vulnerability...

7.2CVSS7.3AI score
Exploits0References2
Prion
Prion
added 2023/07/06 3:15 p.m.25 views

Command injection

An OS command injection vulnerability exists in the ysthirdparty systemuserscript functionality of Milesight UR32L v32.3.0.5. A specially crafted series of network requests can lead to command execution. An attacker can send a sequence of requests to trigger this vulnerability...

5.8CVSS7.1AI score0.00265EPSS
Exploits1References1Affected Software1
Cvelist
Cvelist
added 2023/07/06 2:53 p.m.15 views

CVE-2023-22365

An OS command injection vulnerability exists in the ysthirdparty checksystemuser functionality of Milesight UR32L v32.3.0.5. A specially crafted set of network packets can lead to command execution. An attacker can send a network request to trigger this vulnerability...

7.2CVSS7.3AI score0.00193EPSS
Exploits0References1
Cvelist
Cvelist
added 2023/07/06 2:53 p.m.23 views

CVE-2023-24595

An OS command injection vulnerability exists in the ysthirdparty systemuserscript functionality of Milesight UR32L v32.3.0.5. A specially crafted series of network requests can lead to command execution. An attacker can send a sequence of requests to trigger this vulnerability...

7.2CVSS7.3AI score0.00265EPSS
Exploits1References1
CNNVD
CNNVD
added 2023/07/06 12:0 a.m.1 views

Milesight UR32L 操作系统操作系统命令注入漏洞

The Milesight UR32L is a 4G industrial router from China's Milesight. A command injection vulnerability exists in the Milesight UR32L ysthirdparty userdelete function, which can be exploited by an attacker to execute arbitrary commands on the system...

7.2CVSS8.1AI score0.00288EPSS
Exploits1References2
Rows per page
Query Builder